Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RFGcenKeHnJ_-jSK0nny77E2QMY.roa
File: RFGcenKeHnJ_-jSK0nny77E2QMY.roa (raw, json)
Hash identifier: ML96zoQyxVQKV1sJ/xjEBGkmLk+viunY7bs8rLJGn5s=
Subject key identifier: 44:51:9C:7A:72:9E:1E:72:7F:FA:34:8A:D2:79:F2:EF:B1:36:40:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018529DD4AA85006140ADF24160045CD37AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RFGcenKeHnJ_-jSK0nny77E2QMY.roa
Signing time: Mon 19 Dec 2022 10:10:46 +0000
ROA not before: Mon 19 Dec 2022 10:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:dd:4a:a8:50:06:14:0a:df:24:16:00:45:cd:37:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 10:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44519c7a729e1e727ffa348ad279f2efb13640c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:4d:5d:a3:23:ad:3b:20:dc:55:e6:2c:d4:
c4:80:a8:27:a8:64:b9:55:2c:06:7a:73:88:fa:82:
f0:51:86:6a:94:1b:a9:de:17:51:2f:d8:82:d4:c8:
9e:c7:98:31:ee:3f:58:88:11:84:d3:51:67:58:f9:
9a:58:cf:04:79:3e:52:cc:1f:95:c9:53:b1:88:90:
05:a2:40:00:3e:6b:c4:c5:f7:81:ac:d0:cf:fc:bf:
41:cf:41:24:1d:a7:43:b2:17:ee:65:ec:75:cb:81:
98:d9:b0:bb:8f:81:06:85:00:f5:40:3e:65:e8:f0:
43:63:5f:86:e1:54:72:71:0a:24:c5:68:29:cf:a3:
60:29:09:44:6c:38:ca:fd:bd:61:19:da:20:7f:b5:
8e:c0:e7:f5:57:66:06:b3:47:1e:b2:03:ee:94:38:
be:2f:c0:f6:1a:4c:3d:ee:79:ad:68:66:f9:a8:35:
6a:01:89:a4:99:c5:a4:2d:d5:0f:f1:b9:b4:95:18:
9d:4c:ad:58:9d:6f:e8:12:9f:64:39:4a:00:dd:3a:
af:27:47:92:f1:08:7c:20:a7:94:ba:9e:23:60:c0:
15:57:99:80:08:f4:49:23:75:fc:19:58:a8:9f:55:
52:4b:57:f1:c3:ce:5b:db:ca:10:38:8a:68:24:24:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:9C:7A:72:9E:1E:72:7F:FA:34:8A:D2:79:F2:EF:B1:36:40:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RFGcenKeHnJ_-jSK0nny77E2QMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:18:67:e4:98:d8:ef:37:73:f1:72:3a:c3:e8:ca:4d:08:ac:
33:36:83:50:8d:81:b3:4c:2f:83:57:13:58:1b:31:e4:fa:85:
52:3e:c1:0f:41:5c:1d:30:99:42:b2:e3:33:0a:b0:91:4d:05:
1e:14:ff:ec:f8:5c:7f:4a:d9:c2:bc:b6:77:70:8e:51:d0:23:
f3:0a:e4:a9:7d:ee:8d:3d:d9:8b:d4:ef:63:90:62:d9:36:71:
22:ac:23:a2:a2:fa:a4:4c:24:0a:cb:23:1c:a2:67:b2:7d:73:
8e:f5:21:b8:76:03:87:5c:70:54:d6:88:fd:d1:9f:2b:92:ef:
e0:91:43:01:a1:dc:8c:c3:d7:af:ae:3d:75:b7:df:70:c3:3d:
4c:1e:c7:11:6b:45:d6:87:0b:cc:7a:7b:6e:f9:92:65:3b:5b:
64:df:af:cd:72:1d:2a:fe:95:54:7c:2b:e7:77:64:3f:3a:db:
77:e7:5c:57:ec:50:ca:c8:ea:db:7c:9b:bf:ed:5c:d4:5b:ab:
30:d8:ab:ac:61:18:f3:43:a9:74:bb:59:c6:9e:7a:5e:4c:b0:
90:a0:be:63:ad:60:be:4d:b7:22:cf:a3:9a:cc:50:9b:04:f3:
b2:4f:75:d0:6b:f4:ba:e8:d9:b0:74:21:79:92:28:5e:5a:0f:
82:15:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:45 2025 by rpki-client